Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/6573863A759B11EF9C117755C4F9AE02.roa
File:                     6573863A759B11EF9C117755C4F9AE02.roa (raw, json)
Hash identifier:          dEm7YFdNWANhJUfzjg+ynaragglAI/Eb9fLpOHhvlS8=
Subject key identifier:   08:DF:58:10:62:9A:B4:5E:54:E8:44:C8:96:34:29:DA:A8:80:E6:88
Certificate issuer:       /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial:       0B02
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/6573863A759B11EF9C117755C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 20:30:25 +0000
ROA not before:           Thu 31 Jul 2025 20:30:25 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     38562
IP address blocks:        103.175.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2818 (0xb02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
        Validity
            Not Before: Jul 31 20:30:25 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688bd260-e2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:70:af:6b:88:d3:f5:77:3e:79:c7:4f:81:
                    24:62:cc:58:9a:cb:21:9d:9e:13:99:75:45:f8:a0:
                    46:73:01:f9:6f:bb:8e:ec:70:b4:56:59:73:ef:36:
                    27:1a:2a:73:67:8f:32:a2:8f:0a:13:8f:42:22:0f:
                    bf:6c:d4:31:e4:ee:8b:35:43:94:ad:47:00:a2:9d:
                    8e:f6:7f:9d:d2:6d:08:4d:8c:0b:bb:f4:8b:d0:35:
                    3a:d8:46:1e:9c:42:90:ee:ad:3a:79:df:bc:3d:28:
                    ee:15:ab:8e:c2:bd:d8:7d:5c:7f:81:58:eb:25:b1:
                    ff:37:33:22:07:c8:c7:bc:5d:f4:c8:32:ce:aa:a2:
                    17:e1:91:b3:a1:02:25:98:1e:59:02:ff:bb:89:cc:
                    7d:a0:db:34:90:60:a1:7b:fa:3c:dd:fa:e9:13:5f:
                    d6:b0:81:05:6b:8b:21:65:84:8b:a7:da:54:6b:33:
                    34:e5:6d:72:3b:53:c5:c7:99:7c:2c:01:e6:07:ce:
                    b7:44:17:91:e1:93:54:58:b6:14:b3:b4:e4:65:6d:
                    4b:69:9c:60:fe:6b:e4:9e:06:da:66:64:00:0f:fc:
                    6b:fa:ca:ee:cf:c0:4a:dd:c8:58:a4:e6:cc:9d:d7:
                    8a:11:0e:13:2a:56:10:6a:57:d5:5b:e6:41:0a:b6:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DF:58:10:62:9A:B4:5E:54:E8:44:C8:96:34:29:DA:A8:80:E6:88
            X509v3 Authority Key Identifier:
                keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/6573863A759B11EF9C117755C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:65:e3:06:1b:84:ee:fa:d5:84:0c:33:af:80:b6:44:4a:
         21:ba:a7:c7:17:4b:2f:89:94:9d:b3:ff:5b:ce:52:09:85:b7:
         4d:0d:fc:c1:17:23:79:85:f1:a3:c1:7e:eb:3c:63:b9:74:2a:
         bd:99:91:ae:e3:25:4a:66:c7:f0:a3:d8:40:d1:d3:ba:08:65:
         64:24:27:45:53:58:9b:9e:45:1a:4b:ea:90:d3:6c:9a:37:8f:
         1f:82:37:3e:43:92:e8:6d:5a:70:91:ad:d4:30:a2:95:0f:47:
         f0:15:fe:a8:39:a1:f9:26:69:1d:b4:28:14:a3:71:74:eb:ee:
         b0:c6:75:44:7c:fa:62:6d:51:9f:f6:dd:52:ee:1e:5d:68:89:
         4c:ce:1b:27:e7:5e:c0:c3:3b:64:52:22:af:42:60:eb:20:a6:
         b6:af:55:f7:d2:1e:03:d7:fc:e0:a5:b8:26:4b:b8:33:38:be:
         f5:8b:ec:f5:66:7a:9e:f5:1d:8d:bd:40:05:bf:67:6d:e6:7e:
         de:9b:84:26:61:e1:4e:ba:d1:38:d8:c9:d7:d1:b7:02:76:32:
         cd:8c:c8:14:b0:ee:e3:d2:91:c9:6b:a4:e3:bd:41:9f:cc:a8:
         b9:31:1a:d1:77:c6:55:46:23:1f:29:f2:60:7f:0a:3e:97:10:
         ca:93:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:01:22 2025 by rpki-client